Files
CleanMM/Docs/ADR/ADR-001-Worker-and-Helper-Boundary.md
2026-03-10 17:09:35 +08:00

22 lines
549 B
Markdown

# ADR-001: Worker and Helper Boundary
## Status
Accepted
## Context
Atlas for Mac needs long-running scanning and cleanup operations, but must avoid running privileged or shell-oriented logic directly inside the UI process.
## Decision
- Use a non-privileged worker process for orchestration and progress streaming.
- Use a separate privileged helper for approved structured actions only.
- Disallow arbitrary shell passthrough from the UI.
## Consequences
- Better crash isolation
- Clearer audit boundaries
- More initial setup complexity